I had some windows mobile device that did not sync anymore. I changed the Certificates on exchange 2007 and isa 2006 Servers.
After some investing. The problem was I was missing the GlobalSign Domain Validation CA certificate
After creating the cer file and installed on my PDA active sync works again.